assemblyai
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends installing the
@membranehq/clitool, which is a trusted resource from the skill vendor (membranedev) for managing API integrations. - [COMMAND_EXECUTION]: Employs the
membraneCLI for authentication and executing API actions, which are the intended and safe methods for this skill's functionality. - [PROMPT_INJECTION]: The skill processes transcription data from external audio files, representing an indirect prompt injection surface.
- Ingestion points:
create-transcript,get-transcriptandsearch-wordsactions in SKILL.md. - Boundary markers: None explicitly mentioned in the skill text.
- Capability inventory: Subprocess calls are limited to the
membraneCLI which manages network and credential operations as described in SKILL.md. - Sanitization: Not described in the skill; however, the skill serves as a data retrieval tool and does not interpolate output into unsafe sinks.
Audit Metadata